The Government of Indonesia finally issued Government Regulation No. 71 of 2019 on Organization of Electronic Systems and Transactions ("GR 71/2019") on 4 October 2019, gaining momentum as the country sees the rise of ‘Unicorns’ and President Joko Widodo boasting about the country’s digital economy. GR 71/2019 replaces Government Regulation No. 82 of 2012 with the same title and came into force on 10 October 2019. GR 71/2019 has 11 chapters and an extensive scope ...
The Court of Justice of the European Union (ECJ) has ruled, upon submission by the Austrian Supreme Court (Oberster Gerichtshof, OGH), with the decision of 3 October 2019 (Case C-18/18), that hosting providers, in this case Facebook, may be required by a court to seek and erase content which is identical or, under certain circumstances, equivalent to information previously found to be unlawful ...
Yesterday, in a closely-followed case, the Supreme Court decided not to hear an appeal brought by the Domino’s pizza chain, which sought to overturn the Ninth Circuit Court of Appeal’s decision that entities selling online must make their websites and apps accessible to people with disabilities ...
On October 1, 2019 the Court of Justice of the European Union (CJEU) ruled that pre-ticked boxes do not constitute a valid consent by web users prior to storing cookies on their devices (Verbraucherzentrale Bundesverband e.V. and Planet49 GmbH; Case C-673/17). The decision follows a challenge by the German Federation of the Consumer Organisations against the use of a pre-ticked checkbox which had, by default, consented to cookies on behalf of the user ...
On 3 October 2019, the European Court of Justice (ECJ) published its groundbreaking ruling in case C-18/18 establishing that the EU enables national courts to order information societies such as Facebook to remove defamatory information. This also encompasses equivalent versions of previously declared illegal information. In doing so, the ECJ effectively held that EU law does not preclude injunctions issued by national courts from producing worldwide effects ...
There is an ongoing controversy relating to search engine advertising. In particular regarding the legality of purchasing search terms incorporating third-party trademarks. In seeking a reasonable legal standard, this article discusses the latest legal development in trademark, unfair trading practices, marketing, and competition Law ...
With the continuous and rapid advancement of technology and the increase in the use of digital technology, the provision and sale of digital content has become more and more appealing. This is evident from the emergence of a plethora of businesses the activities of which include engaging in the sale of digital content such as video games, ring back tones, music and videos as well as the rise in the demand for digital content sold through mobile phones ...
In its decision of 8 August 2019 (Ref.: 29 W 940/19), the Munich Higher Regional Court commented for the first time on the German Act on the Protection of Business Secrets (GeschGehG). In court proceedings in which claims arising from the law which came into force at the end of April 2019 are asserted, urgency should not be presumed pursuant to Section 12 (2) German Law against unfair competition (UWG) (analogously) ...
A website operator who has embedded a Facebook “like” button on its website qualifies as a “joint controller” together with Facebook and so can be held liable for the collection and transmission of data from the operator’s website visitors to Facebook. Background Fashion ID is a German online clothing retailer. Its website contained the famous Facebook ‘Like’-button ...
One of the latest and widely discussed GDPR fines in the amount of approximately EUR 20,000 was imposed in Sweden for face recognition in schools. The municipality tried using the new technology to make monitoring the attendance of schools easier. Nevertheless, it failed to ensure a legal basis and proper impact assessment for such data processing ...
The rapid development of technology in the modern era has required more effective and efficient case and court administration services. In addition, Article 2 (4) of Law Number 48 of 2009 on Judicial Powers requires the justice system to be simple, quick and low cost. For this reason, the Indonesian Supreme Court saw a need to reform the administrative and justice system in order to overcome the existing obstacles and challenges of administering the justice system ...
Indian patent law does not permit the filing of patent applications outside the territory of India unless a patent application is filed in India first. The Patent office examines the application to ensure that it does not fall under the defence sector or has any relation to atomic energy ...
A rose, said Shakespeare, by any other name would smell as sweet. But while the Bard may know his flowers, he clearly was no expert on branding Apples. Rodrigo Duterte, the Filipino president, would like to change his country’s moniker “because the Philippines is named after King Phillip”. He appears to be eager to distance his nation from its colonial past, the said monarch being a 16th century ruler of Spain ...
As of August 7th, 2018, the amendments of the Consumer Protection Law (CPL), which includes for the first time, the consumer protection in the field of electronic commerce (e-commerce), taking that as the contracting process or the goods, services and commercial information trading through data communication webs ...
Strict data protection requirements apply to the use of location tracking systems both in the employment context and in cooperation with other companies. In its partial judgement from March 19, 2019, the Lüneburg Administrative Court ruled in compliance with the provisions of the General Data Protection Regulation and the new Federal Data Protection Act (BDSG) that unrestricted tracking of employee vehicles is impermissible ...
A website operator that embeds third party plugins on its website may become a joint controller in relation to the website visitors' personal data together with the third party service provider, according to a preliminary ruling by the Court of Justice of the European Union (CJEU) in case C-40/17 Fashion ID. The judgment upholds the broad interpretation of joint controllership of personal data established by the CJEU in its recent case law ...
In what appears to be a first under the False Claims Act, a case based on flawed cybersecurity has been settled, for nearly $9 million. On July 31, 2019, the Attorney General of New York announced that, alongside the U.S. Department of Justice, New York, eighteen other states, and the District of Columbia have reached an $8.6 million settlement with Cisco Systems, Inc. (“Cisco”) over sales of surveillance video software allegedly vulnerable to hacking ...
This summer, the IRS significantly increased its efforts to police the taxation of Bitcoin, Ethereum, and other similar cryptocurrencies. On July 26, 2019, the IRS announced that it had begun sending letters to taxpayers who potentially failed to pay cryptocurrency taxes associated with digital currency transactions or failed to properly report those transactions. By the end of August, the IRS anticipates that it will have sent over 10,000 letters to taxpayers ...
The Court of Justice of the European Union ("CJEU") published its long-awaited decision on the use of the Facebook Like-Button on July 29, 2019 (Case C-40/17). One major aspect of the judgment is the question to what extent Facebook and website operators who incorporate the Like-Button into their website are joint controllers under European data protection law. As a result, the CJEU affirms this question and takes a firm stand on the conditions for joint controllership ...
The DIFC Authority has proposed the enactment of legislation (the Proposed Law) to replace its current Data Protection Law, DIFC Law 1 of 2007 (as amended) (the Current Law). The Proposed Law is the subject of Consultation Paper 6 of 2019, which is presently posted on the DIFC website for public comments to be provided by 18 August 2019 ...
There has been intense work on the IT security law 2.0 since the “German doxing case" of late 2018/early 2019 when large volumes of data of German celebrities and politicians were published. This bill will significantly extend the importance and the competences of the Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik (“BSI”) in information technology ...
Below you will find a brief summary of the resolutions of the data protection authority uploaded on their website up until today imposing a fine under the GDPR. 1. Failure to facilitate the exercise of data subjects' rights The data subject wanted to exercise his access right, right to receive a copy, and his right to restrict processing of camera recordings of him at the reception area of a service provider ...
Along with the prediction that the continued growth of the Internet of Things (IoT) will transform our everyday lives and how we do business, we can also anticipate that the increased number of connected devices will bring about additional challenges, including greater security and privacy-related risks ...
The topic of “joint controllers” according to Art. 26 GDPR continues to gain momentum. The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg (LfDI) has now, for the first time, published a sample of an agreement for joint controllers under Art. 26(1) s. 2 GDPR as well as a sample relating to the fulfillment of obligations to inform the data subjects pursuant to Art. 26(2) s. 2 GDPR ...
There are hardly any companies that do not use video surveillance systems (CCTV). Such systems record areas such as plant and work facilities or entrance areas. Oftentimes, the video images are not only displayed live on a monitor (“camera-to-monitor system”), but are also recorded automatically for a certain period of time ...
